Nakupuna Companies is seeking a System Administrator I (Windows). The System Administrator I (Windows) is responsible for installing, configuring, maintaining, and troubleshooting Microsoft Windows Server and Windows workstation environments to ensure availability, performance, and security. This position supports Active Directory, Group Policy, DNS, DHCP, virtualization, and related enterprise infrastructure across standalone, on-premises, and cloud environments. Responsibilities may include supporting systems operating on NIPRNet, SIPRNet, DREN, JWICS, and other applicable DoD networks. The administrator ensures compliance with applicable DoD cybersecurity requirements and provides intermediate-level system administration and technical support.

The following duties reflect management's definition of essential functions for this job but do not restrict the tasks that might be assigned. Management may assign additional duties and responsibilities at any time due to reasonable accommodation or other reasons.

System Management

• Administer and maintain Microsoft Active Directory Domain Services (AD DS) across Center business networks (DREN, NIPRNet, SIPRNet, JWICS, and laboratory networks), including organizational units (OUs), user and computer accounts, security groups, Group Policy Objects (GPOs), domain controllers, authentication services, DNS, and access permissions. Support associated Windows Server services, including DHCP, file sharing, Internet Information Services (IIS), and VPN connectivity as applicable.
• Monitor Windows Server and workstation performance, availability, resource utilization, system services, and Windows Event Logs; identify and resolve performance and reliability issues.
• Implement and maintain Windows security configurations, including DISA STIG compliance, Windows Defender settings, Windows Firewall, access controls, security auditing, and applicable system hardening requirements.
• Administer and support Windows Server systems and registered applications hosted in Microsoft Azure, AWS GovCloud, and on-premises environments, including system provisioning, configuration, maintenance, and troubleshooting.
• Manage user accounts and access rightsManage Windows and Active Directory user accounts, security groups, permissions, and privileged access in accordance with established access control policies and least-privilege principles.
• Maintain system configuration documentation, Active Directory structures, Group Policy configurations, standard operating procedures, and change management records.
• Perform Windows Server and workstation operating system upgrades, cumulative updates, and security patching using Windows Server Update Services (WSUS) or other approved enterprise patch management tools.
• Develop, maintain, and execute PowerShell scripts to automate routine Windows administration tasks, system configuration, user management, reporting, and troubleshooting.

Infrastructure Support

• Build, maintain, and support all DREN developer and operations center/force protection workstations.
• Configure, maintain, and troubleshoot Windows storage systems, including NTFS file systems, SMB file shares, storage volumes, permissions, and associated access controls.
• Administer and maintain Windows Server virtual machines within VMware vSphere/ESXi environments, including provisioning, configuration, resource allocation, performance monitoring, and troubleshooting.
• Support Windows-based application development and production environments, including Windows Server provisioning, IIS configuration, Windows services, application dependencies, server decommissioning, and system-level troubleshooting.
• Configure and maintain Windows Server and workstation operating systems in accordance with applicable DISA Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and DoD cybersecurity requirements.
• Automate routine Windows administration tasks using PowerShell, Windows Task Scheduler, and other approved system management tools.
• Coordinate support responses with the local Regional Network Enterprise Center (RNEC) for the submission and management of ticket requests to RNEC/2RCC regarding issues related to virtual machine creation, performance issues, changes in hardware resource allocation, and POAs, waivers, and exceptions.
• Align managed systems concerning Windows Operating Systems, LINUX operating systems, images, containers, PODs, Nodes, or other applicable cloud computing technologies, registered applications, and supporting application technologies to current DISA Security Technical Implementation Guides (STIG)/security requirements guides (SRG), and applicable guidance concerning the cybersecurity posture of administered information systems within the applicable network in which the systems in question reside.
• Provide administration, refactoring support, architecture planning, and execution for cloud computing tasks, including building and maintaining registered applications in Amazon Web Services or Microsoft Azure environments.
• VMware ESXi server administration support to include but not limited to: creating and updating VM templates, building new servers as needed, and managing resource allocation on ESXi host.
• Coordinate with DREN Network Operations Center (NOC) to troubleshoot connectivity issues and DREN network configuration changes/updates.
• Build, maintain, and support all DREN developer and operations center/force protection workstations.

Technical Support

• Support ACAS vulnerability scanning, Information Assurance Vulnerability Alert (IAVA) compliance, endpoint security management, and Windows Server Update Services (WSUS). Responsibilities include approving and deploying Windows updates, remediating vulnerability findings, validating endpoint security agent compliance, and responding to applicable cybersecurity directives and operational requirements.
• Apply, test, and validate Windows operating system updates, security patches, and configuration changes to maintain system security, stability, and compliance with DoD cybersecurity requirements.
• Troubleshoot Active Directory authentication, Group Policy processing, DNS resolution, domain controller connectivity, and Windows Server service issues.
• Support Windows Server backup and recovery operations, including verification of scheduled backups, restoration testing, and recovery of system configurations and data.

Education and Experience

• Bachelor’s degree in computer science, IT, or related field is preferred
• Required certifications including Security+ CE. Other certifications desired but not required, such as:
• SecurityX / CASP+
• CCNP Security
• CISA
• FITSP-O
• GICSP
• SSCP
• 5+ years of system administration experience, with at least 3 years of experience in Windows system administration is preferred.
• Preferred experience includes Windows Server 2019/2022/2025 administration, Active Directory, Group Policy, PowerShell scripting, DNS, DHCP, WSUS, VMware virtualization, and DISA STIG implementation.
• Relevant certifications such as:
• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Microsoft Certified: Azure Administrator Associate
• CompTIA Server+
• VMware Certified Professional (VCP)
• Relevant AWS certifications

Clearance Requirements: Secret

Location: Fort Belvoir, VA

Physical Requirements: The ideal candidate must at a minimum, be able to meet the following physical requirements of the job with or without a reasonable accommodation:

• Ability to perform repetitive motions with the hands, wrists, and fingers.
• Ability to engage in and follow audible communications in emergencies.
• Ability to sit for prolonged periods at a desk and work on a computer.

The Nakupuna Companies use a market-based compensation strategy to ensure that our employees are compensated within applicable market ranges commensurate with multiple factors, including but not limited to the individual’s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, organizational requirements, and position location. The projected compensation range for this position is $75,000.00 to $132,000.00 (annualized USD). The salary range displayed represents the typical salary range for this position and is just one component of Nakupuna Companies total compensation package for employees.